separated VPN script into separate role